CVE-2023-39343

Sulu is an open-source PHP content management system based on the Symfony framework. It allows over the Admin Login form to detect which user (username, email) exists and which one do not exist. Sulu Installation not using the old Symfony 5.4 security System and previous version are not impacted by this Security issue. The vulnerability has been patched in version 2.5.10.

• CWE-204

• https://github.com/sulu/sulu/commit/5f6c98ba030b2005793e2dc647cc938937ea889bPatch
• https://github.com/sulu/sulu/releases/tag/2.5.10Release Notes
• https://github.com/sulu/sulu/security/advisories/GHSA-wmwf-49vv-p3mrMitigation, Vendor Advisory
• https://github.com/sulu/sulu/commit/5f6c98ba030b2005793e2dc647cc938937ea889bPatch
• https://github.com/sulu/sulu/releases/tag/2.5.10Release Notes
• https://github.com/sulu/sulu/security/advisories/GHSA-wmwf-49vv-p3mrMitigation, Vendor Advisory

Published

Aug 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-39338Enables an authenticated user (enrolled device) to access a …6.8
• CVE-2023-39339A vulnerability exists on all versions of Ivanti Policy Secu…4.9
• CVE-2023-3934Rejected reason: Please discard this CVE, we are not using t…
• CVE-2023-39340A vulnerability exists on all versions of Ivanti Connect Sec…7.5
• CVE-2023-39341"FFRI yarai", "FFRI yarai Home and Business Edition" and the…3.3
• CVE-2023-39342Dangerzone is software for converting potentially dangerous …3.6
• CVE-2023-39344social-media-skeleton is an uncompleted social media project…8.8
• CVE-2023-39345strapi is an open-source headless CMS. Versions prior to 4.1…7.5
• CVE-2023-39346LinuxASMCallGraph is software for drawing the call graph of …9.8
• CVE-2023-39347Cilium is a networking, observability, and security solution…9
• CVE-2023-39348Spinnaker is an open source, multi-cloud continuous delivery…5.3
• CVE-2023-39349Sentry is an error tracking and performance monitoring platf…8.1